FS#56951 - [linux-firmware] [linux] microcode_amd_fam17h.bin available for Spectre vulnerability from OpenSUSE

Attached to Project: Arch Linux
Opened by Kyle Devir (QuartzDragon) - Thursday, 04 January 2018, 17:40 GMT
Last edited by Laurent Carlier (lordheavy) - Monday, 21 May 2018, 06:46 GMT
Task Type Bug Report
Category Upstream Bugs
Status Closed
Assigned To Tobias Powalowski (tpowa)
Jan Alexander Steffens (heftig)
Laurent Carlier (lordheavy)
Architecture x86_64
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 3
Private No


OpenSUSE released an announcement about "microcode_amd_fam17h.bin" being available.

A search on Google seems to suggest that they are sole providers of the microcode update right now, as the linux-firmware tree has no updates regarding it.

A bit of searching found that the microcode update is supplied in this RPM package:


It is found here, under other versions, under unstable:


I must admit I find it slightly weird that they have the firmware ahead of everyone else, with AMD providing no official annoucement on the kernel mailing lists, nor submitting it to linux-firmware pronto.

Anyway, I hope this gets pushed out quickly enough.
This task depends upon

Closed by  Laurent Carlier (lordheavy)
Monday, 21 May 2018, 06:46 GMT
Reason for closing:  Fixed
Additional comments about closing:  linux-firmware 20180518.2a9b2cf-1
Comment by Sergio Correia (sergio.correia) - Thursday, 04 January 2018, 20:18 GMT
I built an updated linux-firmware package with the microcode_amd_fam17h.bin file from the rpm you linked, to check it out, but I was not very sucessfull:

[ 713.804179] microcode: patch size mismatch
[ 713.804182] microcode: Patch-ID 0x08001213: size mismatch
Comment by Sergio Correia (sergio.correia) - Thursday, 04 January 2018, 20:32 GMT Comment by Sergio Correia (sergio.correia) - Friday, 05 January 2018, 19:59 GMT
Ah, forgot to report back: after the aforementioned patch, the error about size mismatch was gone, but the microcode version did not change. After some debugging in arch/x86/kernel/cpu/microcode/amd.c, it looks like that particular microcode targets epyc-only (800f12). I was testing with a ryzen 5 1600 (800f11).
Comment by Levente Polyak (anthraxx) - Wednesday, 10 January 2018, 13:31 GMT
linux firmware size load patch present in v4.14.13 and v4.9.76